Medium
CVE-2022-1946
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2021-25066
Ninja Ninja Forms Contact Form <= 3.6.10 - Authenticated (Admin+) Stored Cross-Site Scripting via import
Medium
CVE-2021-36827
Ninja Forms Contact Form <= 3.6.9 - Authenticated (Admin+) Cross-Site Scripting via label
High
a9743351-9f28-49bf-8b08-85ffbdcfa5f0
Co-Authors Plus 3.5 - 3.5.1 - Sensitive Information Disclosure
High
488970f0-3120-4f4a-9915-2ae1708bd86a
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.9 - Cross-Site Request Forgery to Field Import and PHP Object Injection
Critical
CVE-2022-1903
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 3.4.7 -Authentication Bypass via Password Reset Weakness
Medium
CVE-2022-1321
miniOrange's Google Authenticator <= 5.5.5 - Authenticated (Admin+) Cross-Site Scripting
Medium
7681a661-21bd-42fb-ac97-1da808435520
Qubely <= 1.7.8 - Missing Authorization
Medium
CVE-2022-1994
Login With OTP Over SMS, Email, WhatsApp and Google Authenticator <= 1.0.7 - Cross-Site Scripting
Critical
CVE-2022-0875
Login With OTP Over SMS, Email, WhatsApp and Google Authenticator <= 1.0.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2022-2083
Simple Single Sign On <= 4.1.1 - Insecure OAuth Implementation to Authentication Bypass
High
CVE-2022-1572
HTML2WP <= 1.0.0 - Arbitrary File Deletion
Medium
CVE-2022-1916
Active Products Tables for WooCommerce <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-1964
Easy SVG Support <= 3.2.0 - Cross-Site Scripting via SVG Upload
Medium
CVE-2022-1843
MailPress <= 7.2.1 - Cross-Site Request Forgery
Medium
e1fc6a2e-9c91-4517-8f04-fb3ea65413b8
Zengo Custom Thumbnail Image Gallery <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
abc14a00-5560-440b-a5ba-4ff41a6c54c3
Visualizer <= 3.7.6 - Reflected Cross-Site Scripting
Medium
3839257c-4ba2-442a-8d47-dd5c1e5561a8
Automatic Domain Changer <= 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-1776
Icegram Engage <= 2.1.7 - Cross-Site Scripting
High
CVE-2022-1472
Better Find and Replace <= 1.3.5 - Admin+ SQL Injection
Medium
CVE-2022-1889
Newsletter <= 7.4.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1630
WP-EMail <= 2.68.2 - Cross-Site Request Forgery to Log Deletion
Medium
CVE-2022-1614
WP-EMail <= 2.68.2 - Spam Protection Bypass
Medium
CVE-2022-0663
Print, PDF, Email by PrintFriendly <= 5.2.2 - Authenticated (Admin+) Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.